HP XP RAID Manager Software - Manual (Page 32)

value of the memberOf attribute value for each user. In other words, the user group you add to
the Remote Web Console should match the group name in the Active Directory.
CAUTION: When a user account belongs to more than one group, note the cautions in “User
groups” (page 32) . If one user needs to use different user groups for different purposes, then create
local user accounts in Remote Web Console, not using an authorization server.
NOTE: The DN of the user group to be set in Active Directory must be between 1 and 250
characters. You can register a maximum of 20 user groups at one time.
User groups
An administrator must create the Remote Web Console user accounts and add each user to a
built-in group. Whether a registered user has privileges beyond those granted by membership in
the Remote Web Console group is determined by any other user groups(s) to which the user
belongs. A user can belong to more than one group.
Roles and user groups
The operations that are allowed for each user depends on the role of the user. The roles are not
set in individual user attributes, but at the user group level. There are two ways to change the
operations that are allowed for users:
•
Move the user to another user group.
For more information, see “Changing a user’s permissions” (page 39) .
•
Change the roles assigned to the user group of which the user is a member.
For more information, see “Changing a user group's permissions” (page 41) .
Resource groups and user groups
The resources that users can manipulate depend on the resource groups. Resource groups are not
assigned at the individual user level, but at the user group level. There are two ways to change
the resources that are allowed to users:
•
Move the user to another user group.
For more information, see “Changing a user’s permissions” (page 39) .
•
Change the resource groups assigned to the user group of which the user is a member.
For more information, see “Changing the resource groups assigned to a user group” (page 41) .
For more information about resource groups, see the HP P9000 Provisioning for Open Systems
User Guide or the HP P9000 Provisioning for Mainframe Systems User Guide.
User registration example
A sample configuration follows:
•
Setting operations that affect the security of the whole system must be done by the administrator.
•
The setting operations on the Resource Group 10 must be done by User A.
•
The setting operations on the Resource Group 20 must be done by User B.
To implement the above configuration, assign users to user groups as shown in Table 6 (page 33) .
32 Setting up and managing user accounts